phly/phly-configfactory

This is a generally healthy, licensed, stable package with an active organizational owner, a matching repository, a current 1.5.0 release, no registry deprecation, and a clean package structure. The repository provides tests and a changelog even though tests are not included in the artifact, and the package has no install-time lifecycle scripts or dangerous workflow patterns. The main concerns are the very low release frequency, no recorded commits or active maintainers in the last 3 months, absent security scanning and security policy, and an underspecified GitHub Actions token-permissions configuration; these warrant monitoring but do not outweigh the recent release and repository backing.

Latest 1.5.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
psr/container Version ^1.0 || ^2.0	—	—